如何生成CRL（证书吊销列表）文件
问题描述：
我使用自签名证书进行测试，如何生成证书吊销列表以测试证书验证？在JDK中有keytool是否提供了这样的功能？
I'm using self-signed certificates for testing, how can I generate certificate revocation list to test cert verification? Has keytool in JDK provided such functionalities?
谢谢！
答
OpenSSL http://www.openssl.org/
CA（包含）非常适合测试简单的PKI。也许初看起来有点令人生畏，但有很多信息。
The CA (included) is excellent for testing simple PKIs. Perhaps a little bit daunting at first, but there is plenty of info around.
对于CRL，开箱即用的设置应该可以为您提供帮助：
http://www.openssl.org/docs/apps/ca.html#CRL_OPTIONS
For CRLs, the out of the box setup should do the trick for you: http://www.openssl.org/docs/apps/ca.html#CRL_OPTIONS
最好的。